This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WyxHDbJENILhlSOVOnjB7woWlHk.cer
File: WyxHDbJENILhlSOVOnjB7woWlHk.cer (raw, json)
Hash identifier: ZdtGfgKV7FRO550qNVuPSzkD8gEjRri8HYyn3aKmziI=
Subject key identifier: 5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019AE3A1163E9FB35963DC947FBF88A8C7A6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 03 Dec 2025 09:52:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209719
IP: 193.107.67.0/24
IP: 2001:67c:940::/48
IP: 2a04:e1c0::/31
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Dec 2025 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:e3:a1:16:3e:9f:b3:59:63:dc:94:7f:bf:88:a8:c7:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Dec 3 09:52:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b2c470db2443482e19523953a78c1ef0a169479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:ce:f4:69:5d:88:26:a7:96:8a:03:42:79:
56:0f:8b:1f:b6:72:7f:b0:7e:fc:ee:6c:d2:6d:91:
9f:ab:50:a8:06:4d:6a:9a:39:ed:98:8f:e2:fe:dd:
8f:5a:f6:f0:da:33:42:64:12:55:b1:14:f5:a6:b9:
81:d0:c2:67:3b:2f:2c:21:04:f5:ae:7d:63:1e:80:
30:b9:25:15:e3:ff:92:33:d6:2e:c8:dc:1a:03:36:
eb:4a:78:4a:92:d9:38:f9:0f:8f:40:23:06:32:61:
e3:71:76:78:b8:7e:ee:a5:3c:10:ba:9c:bb:33:ad:
76:fe:6b:97:84:49:c6:2d:2d:ae:16:52:0f:8c:08:
12:03:17:b3:c6:62:01:c5:6e:f9:3f:44:89:01:78:
b7:61:13:79:e4:db:e4:bd:1d:ac:74:84:4d:7e:99:
38:39:83:54:85:18:2f:6e:1c:b5:24:a4:aa:9a:a1:
62:1b:60:79:03:d4:b2:c6:fc:06:7b:1e:bf:67:3a:
7f:47:ea:83:a2:d4:bf:b5:4b:9d:2e:21:9c:ed:c2:
c5:bf:88:79:cd:16:b0:a8:49:6b:8e:bd:ee:7e:26:
4e:c8:d6:c7:41:47:83:c7:72:82:a7:81:67:14:d4:
7b:18:d1:23:91:b9:26:c2:1d:95:de:92:00:64:86:
e7:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:2C:47:0D:B2:44:34:82:E1:95:23:95:3A:78:C1:EF:0A:16:94:79
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/147ae4-775b-4c48-b0da-c379f8c23fc1/1/WyxHDbJENILhlSOVOnjB7woWlHk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.107.67.0/24
IPv6:
2001:67c:940::/48
2a04:e1c0::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209719
Signature Algorithm: sha256WithRSAEncryption
18:c8:50:cf:5a:00:05:44:15:9f:21:75:3b:34:30:3c:18:3d:
ab:4a:74:36:bb:55:e7:e0:5b:8b:6f:42:b2:55:20:1d:24:20:
bf:e2:2d:50:a1:aa:a1:be:51:3d:00:08:b8:13:ad:be:88:73:
a6:49:76:84:d9:0e:21:3a:b0:16:c5:25:40:da:69:cf:6f:f9:
d1:d0:30:d6:35:2c:ac:cb:99:48:89:12:fb:89:d9:f8:08:22:
5a:d1:b9:0d:94:e3:12:81:26:ec:c2:1b:48:5a:72:93:3e:0a:
b4:7e:4d:6b:96:23:94:57:81:0f:ca:05:05:6e:8d:d9:27:55:
88:b4:dd:f2:31:21:46:e1:96:f8:53:8a:ae:0e:da:ba:c3:b9:
e5:cd:79:85:25:bf:07:eb:15:8d:6a:b9:e5:f1:51:48:a8:8d:
8b:fe:09:71:fe:9f:e6:00:d1:fa:86:a3:9f:4d:eb:53:da:cd:
3a:d3:a6:12:4f:e1:ff:8d:f2:18:28:cd:c4:ad:95:af:47:d9:
6c:ab:26:8f:f9:d4:b4:8c:a7:00:4c:79:28:64:9c:33:cb:29:
5f:50:dd:5b:a7:2b:12:a0:a1:b8:b9:b6:12:8e:b3:5a:33:2a:
45:3d:e9:5a:58:62:9e:65:ea:5c:23:96:43:c6:71:68:a8:59:
66:db:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Dec 6 06:45:06 2025 by rpki-client